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Top Stories 

• The head of the Idaho-based DBSI Inc., real estate investment firm and three others were 
found guilty April 14 on federal wire and securities fraud charges over a scheme which 
cost investors at least $169 million. - Minneapolis Star Tribune (See item 6) 

• Police responded to several multi- vehicle accidents on various highways in the Milwaukee 
area April 14 due to ice and blowing snow, including one crash involving two semi-trucks 
and two school buses. - WDJT 58 Milwaukee (See item 8) 

• A spill April 1 1 at a wastewater treatment plant while crews were installing a lift station 
released an estimated 17,000 gallons of untreated sewage into the Mississippi River at 
LeClaire, Iowa. - WQAD 8 Moline (See item 16) 

• Five people were convicted in a scam in the Bryan, Texas area that used individuals 
allegedly injured in car accidents to submit $3 million worth of false billing claims, causing 
$1.2 million in losses. - Bryan-College Station Eagle (See item 17) 



Fast Jump Menu 



PRODUCTION INDUSTRIES 

• Energy 

• Chemical 

• Nuclear Readers. Materials, and Waste 

• Critical Manufacturing 

• Defense Industrial Base 

• Dams 

SUSTENANCE and HEALTH 

• Food and Agriculture 

• Water and Wastewater Systems 

• Healthcare and Public Health 



SERVICE INDUSTRIES 

• Financial Services 

• Transportation Systems 

• Information Technology 

• Communic ations 

• Commercial Facilities 
FEDERAL and STATE 

• Government Facilities 

• Emergency Services 



- 1 - 



Energy Sector 



1. April 15, WNEP 16 Scranton - (Pennsylvania) Power plant set to shut down. 

Officials announced April 14 that a Sunbury Generation electricity generating plant in 
Snyder County is scheduled to close in June due to new environmental regulations 
going into effect in 2015. 

Source: http://wnep.com/2014/04/15/electric-plant-set-to-shut-down/ 

T Return to top i 

Chemical Industry Sector 

2. April 14, Winston-Salem Journal - (North Carolina) One taken to hospital after 
explosion in downtown Winston-Salem lab. One employee of Asinex was injured by 
a small chemical explosion caused by mixing sodium azide with a trade chemical 
during a routine procedure inside a laboratory in the Wake Forest Innovation Quarter in 
Winston-Salem April 14. The building was evacuated and nearby roadways were 
closed for several hours while HAZMAT crews assessed and cleared the scene. 

Source: http://www.iournalnow.com/news/local/one-taken-to-hospital-after-explosion- 
in-downtown-winston-salem/ article e42864d4-c3e3 - 1 1 e3-baab-00 1 a4bcf687 8 .html 

T Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

3. April 15, Newark Star-Ledger - (New Jersey) Ex-Picatinny worker accused of 
endangering kids with radioactive material. A former contractor at the Picatinny 
Arsenal was arrested at his home in Sparta, New Jersey, April 12 and charged with 
endangering his children when police responding to an unrelated issue spotted three 
small canisters containing radioactive materials. Police suspected that the materials 
were stolen from the Picatinny Arsenal. 

Source: http://www.ni.com/sussex-county/index.ssf/2014/04/ex- 

picatinny worker accused of endangering kids with radioactive material.html 

4. April 14, South Jersey Times - (New Jersey) PSEG Nuclear’s Salem 1 reactor in 
Lower Alloways Creek shut down 2nd time in week. The Salem 1 reactor at PSEG 
Nuclear’s power plant in Lower Alloways Creek Township automatically shut down 
April 14 after a restart from a previous unplanned outage due to a generator protection 
relay issue. 

Source: http://www.nj.com/salem/index.ssf/2014/04/pseg nuclears salem reactor in 1 
ower alloways creek shut down 2nd time in week.html 
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Critical Manufacturing Sector 
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Nothing to report 
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Defense Industrial Base Sector 



See item 3 
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Financial Services Sector 

5. April 15, Softpedia - (International) RCE, information disclosure and XSS flaws found in 
PayPal Partner Program. A security researcher identified and reported a cross-site scripting 
(XSS) issue and an information disclosure issue that could be leveraged for remote code 
execution in the PayPal Partner Program’s payment processor Web site. The issues were later 
closed by PayPal. 

Source: http://news.softpedia.com/news/RCE-Information-Disclosure-and-XSS-Flaws-Found- 
in-PayPal-Partner-Program- Video-437634, shtml 

6. April 14, Minneapolis Star Tribune - (National) Idaho investment executive 
convicted on 78 fraud counts. The head of the Idaho-based DBSI Inc., real estate 
investment firm and three others were found guilty April 14 on federal wire and 
securities fraud charges for falsely advertising investments, which cost 8,000 investors 
at least $169 million. 

Source: http://www.startribune.com/business/255261931.html 

7. April 14, Glendale News- Press - (California) Man accused of bank fraud, stealing 99 
Cents Only store customer identities. A Glendale man and two others face charges 
for allegedly obtaining and distributing payment card skimming devices and placing 
them at several 99 Cents Only stores in southern California, causing losses of over $2 
million. 

Source: http://www.glendalenewspress.com/news/tn-gnp-man-accused-of-bank-fraud- 
stealing-99-cents-only-store-customer-identities-20 1404 14,0,46 1 3407 . story 
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Transportation Systems Sector 

8. April 15, WDJT 58 Milwaukee - (Wisconsin) Multiple cars slide into semi near 
Miller Park, dozens of other crashes Monday into Tuesday. Northbound lanes of 
U.S. 45 in Wauwatosa were closed for 5 hours April 14 while police responded to 
several multi-vehicle accidents, including an accident involving 2 semi-trucks and 2 
school buses. All lanes of Interstate 94 in Waukesha County were also closed for 2 
hours due to blowing snow and icy conditions that caused a crash involving 7 vehicles. 

Source: http://www.cbs58.com/news/local-news/Icy-roads-lead-to-several-multi- 
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vehicle-crashes-on-area-highways-ovemight-255290721.html 



9. April 14, Federal Aviation Administration - (National) FAA proposes $547,500 civil 
penalty against Hawaiian Airlines. The U.S. Department of Transportation’s Federal 
Aviation Administration (FAA) proposed a $547,500 penalty against Hawaiian Airlines 
Inc., April 14, declaring the airline was not in compliance with a July 2000 Airworthiness 
Directive (AD) requiring inspection of certain engine thrust reverser components. The FAA 
alleged the airline operated a Boeing 767-300 more than 5,000 times between July 2004 
and July 2012 when it was out of compliance. 

Source: http://www.faa.gov/news/press releases/news story.cfm?newsId=16134 
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Food and Agriculture Sector 

10. April 14, Associated Press - (Minnesota) Rochester bar's faulty pop machine 
blamed for carbon dioxide poisoning. Authorities believe a malfunctioning soda 
carbonation machine may be to blame for a carbon dioxide leak at Rooster’s Bam and 
Grill in Rochester, Minnesota, April 14. One employee was hospitalized after he 
collapsed while investigating the leak in the basement of the restaurant. 

Source: http://www.twincities.com/localnews/ci 25566544/rochester-bars-faulty-pop- 
machine-blamed-carbon-dioxide 

11. April 14, U.S. Department of Agriculture - (International) Washington firm recalls 
dried egg products due to possible Salmonella contamination. The Food Safety and 
Inspection Service (FSIS) announced April 14 that Nutriom LLC expanded its February 
15 recall of 226,710 pounds of processed egg products to include an additional 82,884 
pounds of the products due to possible Salmonella contamination. The FSIS issued a 
public health alert March 26 removing the products from commerce after the company 
declined to expand its initial recall, and Nutriom later agreed to a partial recall of some 
products identified in the alert. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/20 1 4/recall-0 15-201 4-release-expansion 

12. April 13, Food Safety News - (Michigan) Clostridium perfringens apparent cause of 
Michigan outbreak. Preliminary results announced by the Muskegon County 
Department of Health revealed a presence of Clostridum perfringens, a foodbome 
illness-causing bacteria, in a sample tested from Bonicki’s Restaurant and Sports 
Bistro. Officials engaged following at least six reports from customers who were 
sickened after eating at the restaurant between April 3 and April 6. 

Source: http://www.foodsafetynews.com/2014/04/clostridium-perfringens-appears- 
cause-of-michigan-outbreak 

13. April 12, Food Poisoning Bulletin - (California) California warns consumers not to 
eat anchovies, sardines, crab. California health officials warned consumers to avoid 
eating commercially or recreationally caught anchovies or sardines or the internal 
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organs of crab from Monterey and Santa Cruz counties due to dangerous levels of 
domoic acid found in the species. This warning is in addition to an April 4 advisory that 
warned against eating recreationally harvested bivalve shellfish, such as mussels and 
clams, from the same counties for the same reason. 

Source: http://foodpoisoningbulletin.com/2014/california-warns-consumers-not-to-eat- 
anchovies-sardines-crab/ 



14. April 12, U.S. Food and Drug Administration - (National) Private Selection Sweet 
Strawberry Sorbet recalled for undeclared allergen. The Kroger Co., announced a 
recall of 16-ounce packages of its Private Selection Sweet Strawberry Sorbet sold at 
Kroger and Jay C stores in 13 States due to undeclared milk. The recall was initiated 
after two consumers reported possible allergic reactions in connection with the product. 
Source: http://www.fda.gov/Safety/Recalls/ucm393215.htm 

15. April 11, U.S. Food and Drug Administration - (International) Sinco Inc issues allergy 
alert on undeclared peanut protein in Archer Farms Chocolate Hazelnut Swirl 
Gelato. SINCO Inc., voluntarily recalled its 30-ounce packages of Archer Famers 
Chocolate Hazelnut Swirl Gelato due to undeclared peanut protein. The products were 
imported from Italy and sold exclusively to Target retail stores nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm392999.htm 
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Water and Wastewater Systems Sector 

16. April 14, WQAD 8 Moline - (Iowa) 17,000 gallons of raw sewage released at 

LeClaire. An April 1 1 spill that occurred at a wastewater treatment plant while crews 
were installing a lift station released an estimated 17,000 gallons of untreated sewage 
into the Mississippi River at LeClaire, Iowa. 

Source: http://wqad.com/2014/04/14/17000-gallons-of-raw-sewage-released-at-leclaire/ 
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Healthcare and Public Health Sector 

17. April 15, Bryan-College Station Eagle - (Texas) Former chiropractor, co-defendant 
sentenced in insurance fraud scheme. A former Bryan, Texas chiropractor and a co- 
defendant were among five people convicted for their roles in a scheme to submit $3 
million worth of false billing claims, of which insurance companies paid at least $1.2 
million. Four chiropractic clinics and a law firm were used in the scam to recommend 
patients who had allegedly been injured in auto accidents to receive unnecessary 
treatment in order to falsely bill the auto insurance companies and force them into 
settling claims. 

Source: http://www.theeagle.com/news/local/former-chiropractor-co-defendent- 
sentenced-in-insurance-fraud-scheme/article 581e53a5-9b0c-51ba-919e- 
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a4b4f491d01c.html 



18. April 14, Muskegon Chronicle - (Michigan) Muskegon chiropractor clinic damaged 
by early morning fire. Authorities are investigating the cause of an April 14 fire at 
Mell Chiropractic Clinic in Muskegon that caused extensive damage to the building. 
Source: http://www.mlive.com/news/muskegon/index.ssf/2014/04/muskegon chiropract 
ic clinic d.html 
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Government Facilities Sector 

19. April 15, KMOV 4 St. Louis - (Missouri) 6 injured after school bus overturns in 
Jefferson County. Four children and two adults were transported to an area hospital 
for minor injuries after a Mapaville State School bus overturned in Jefferson County, 
Missouri, April 14. 

Source: http://www.kmov.com/news/local/Police-Six-people-iniured-after-bus- 
overturns-near-Pevely.html 

20. April 14, Wichita Eagle - (Kansas) Floodlight caused La Crosse High fire that led to 
moving prom; no classes Monday. Classes at La Crosse High School in Kansas were 
cancelled for April 14 after an April 12 blaze caused when a hot floodlight set fire to a 
black plastic tarp being used for prom decorations. Classes were expected to resume 
April 15. 

Source: http://www.kansas.com/2014/04/13/3403200/floodlight-caused-la-crosse- 
high.html 

21. April 14, WTVQ 36 Lexington - (Kentucky) Kingdom Come State Park to reopen 
Tuesday after forest fire. Park officials announced that Kingdom Come State Park 
near Cumberland, Kentucky, will reopen April 15 after closing April 13 due to a 200- 
acre forest fire. Some park trails will remain closed until they are inspected and cleared. 
Source: http://www.wtvq.com/content/localnews/storv/Kingdom-Come-State-Park-to- 
Reopen-Tuesdav-After-Fo/UvLDzuCV4EWViOY6fOM9YQ.cspx 

For another story, see item 8 
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Emergency Services Sector 

22. April 15, Macomb Daily - (Michigan) Powder that caused Royal Oak police station 
evacuated is likely corn starch, chief says. The Royal Oak Police station in Michigan 
was evacuated for more than 2 hours April 15 after an unknown white powder was 
found in a letter opened by a detective. The police chief reported that the powder is 
most likely com starch. 

Source: http://www.macombdailv.com/general-news/20140415/update-powder-that- 
caused-royal-oak-police-station-evacuated-is-likely-corn-starch-chief-says 
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23. April 14, Associated Press - (Washington) CenturyLink: 4,500 calls failed during 
911 outage. Approximately 4,500 calls failed to get through during a 6-hour 9-1-1 
outage in Washington the week of April 7, CenturyLink reported April 14. The outage 
was caused by a technical error in a third-party vendor’s call router which stopped the 
system from processing calls. 

Source: http://www.komonews.com/news/local/CenturvLink-4500-calls-failed-during- 
911-outage-255262931.html 
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Information Technology Sector 

24. April 15, Softpedia - (International) Expert finds SQL injection, RCE vulnerabilities 
in Flickr Photo Books. A security researcher identified and reported a SQL injection 
vulnerability and a remote code execution vulnerability in Flickr’s Photo Books Web 
site that could allow an attacker to gain access to Flickr’s databases. Yahoo closed the 
vulnerabilities after a second report by the researcher. 

Source: http://news.softpedia.com/news/Expert-Finds-SQL-Iniection-RCE- 
Vulnerabilities-in-Flickr-Photo-Books-Video-437724.shtml 

25. April 15, Help Net Security - (International) Hardware manufacturer LaCie suffered 
year-long data breach. Computer storage manufacturer LaCie stated that the FBI 
informed the company of a data breach where malware was used to gain access to 
customer transactions carried out on the company’s Web site. LaCie temporarily 
disabled the e-commerce portion of its Web site and will be resetting users’ passwords 
in response. 

Source: http://www.net-securitv.org/secworld.php?id=16693 

26. April 15, Help Net Security - (International) Heartbleed: YMware starts delivering 
patches. VMware announced that it began issuing patches for its products affected by 
the Heartbleed OpenSSL vulnerability, with patches for all affected products expected 
by April 19. 

Source: http://www.net-securitv.org/secworld.php7idM6692 

27. April 14, Softpedia - (International) Flash SMS flaw in iOS can be exploited to make 
the lock screen unresponsive. A security researcher identified a Flash SMS flaw in 
iOS that can be used to make a device’s lock screen unresponsive, which could be used 
for ransom attacks. The flaw was fixed with the release of iOS 7.1 but devices running 
previous versions of the mobile operating system are vulnerable. 

Source: http://news.softpedia.com/news/Flash-SMS-Flaw-in-iQS-Can-Be-Exploited-to- 
Make-the-Lock-Screen-Unresponsive-437 566. shtml 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

28. April 15, WLOX 13 Biloxi - (Mississippi) Lives turned upside after dangerous storm 
hits RV park. A severe storm with high winds caused extensive damage to the Santa 
Maria RV Park in Gautier April 14, damaging at least 25 campers or RVs. Two 
individuals were hospitalized. 

Source: http://www.wlox.com/storv/25248376/residents-lives-at-santa-maria-rv-park- 
tumed-upside-after-dangerous-storm 

29. April 15, WRC 4 Washington, D.C. - (Virginia) Man in custody after standoff near 
Tysons Corner. A man was taken into custody after he barricaded himself in his unit at 
the Rotunda condominium complex in Tysons Corner for nearly 8 hours April 14 after 
the police arrived due to a noise complaint. Three floors of the building were evacuated 
as a precaution when police believed they saw and smelled gasoline outside the 
apartment, and nearby roadways were closed during the incident. 

Source: http://www.nbcwashington.com/news/local/Police-Man-Threatens-to-Shoot- 
Officers-Barricades-Self-in-Va-Condo-255289361.html 



30. April 14, KING 5 Seattle - (Washington) 1 injured, dozens displaced in Seattle motel 
explosion. One person was critically injured and 46 residents were displaced by a 
natural gas explosion at the Klose In Motel in Seattle April 14. Crews are assessing the 
structural integrity of the building and estimated damage to total $55,000. 

Source: http://www.king5.com/news/cities/seattle/SPD-At-least-one-iniured-at- 
explosion-at-Seattle-motel-255204181.html 

31. April 14, KXAS 5 Fort Worth - (Texas) Apartment fire leaves more than 50 people 
displaced. Firefighters responded to a 4-alarm fire at the Mayan Homes Apartments in 
Dallas after one building caught fire and spread to a second one, causing a partial roof 
collapse. One person was injured by the blaze, and 36 units in the buildings were 
destroyed, leaving more than 50 residents displaced. 

Source: http://www.nbcdfw.com/news/local/Apartment-Fire-Leaves-50-People- 
Displaced-255023021.html 
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32. April 14, KHQ 6 Spokane - (Washington) 41 peopled displaced after apartment fire: 
People sift through damage to find what's left. A building at the Brick-Haven 
Apartment Complex in Spokane caught fire April 12 and left 41 residents displaced. 
Officials estimated damages to total $700,000. 

Source: http://www.khq.com/storv/25233074/41-people-displaced-after-saturday- 
aftemoon-fire 

33. April 14, WSB-TV 2 Atlanta - (Georgia) Gwinnett fire destroys 15 units in 
apartment complex. Officials believe a candle may have been to blame for a fire that 
broke out at the Peachtree Comers Apartment complex in Gwinnett County April 14 
and damaged 15-20 units in the building. 

Source: http://www.wsbtv.com/news/news/local/gwinnett-fire-destroys-15-units- 
apartment-complex/nfZKN/ 
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Dams Sector 



34. April 14, U.S. Army Corps of Engineers - (California) Corps approves full water 
storage capacity at Success Dam. The U.S. Army Corps of Engineers Sacramento 
District announced an April 1 1 approval to raise the operating restriction of the 
reservoir behind Success Dam in California to the maximum authorized storage 
capacity of 82,291 acre-feet, potentially increasing the amount of water for local 
residents during high-water months. 

Source: http://www.spk.usace.army.mil/Media/NewsReleases/tabid/1034/ Article/48399 
4/corps-approves-full-water-storage-capacity-at-success-dam.aspx 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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